Re: [proxies] [IETF Proxy] Next Steps

[Stefan Winter <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

|> Certainly. Contractual bounds could be used. My personal
|> preference would be to have an encryption channel between home
|> and visited domain AAA servers (_not_ NASes) to eliminate the
|> problem of paperwork at all, but I admit that this is almost
|> impossible to do correct.
|
| Not sure why you say this: getting the keys set up might be politically
| or procedurally hard, but it seems technically straightforward.

I assume you are thinking of a manual key distribution between peers?
That is an option for a small scale deployment for sure. With 1000 admin
domains where every one may want to exchange secret information with
everyone else, there would need to be 1000^2 sets of keys in place. All
peers are not allowed to be in possession of any keys but those
concerning themselves. While it is technically possible (maybe), the
deployment and maintenance hurdles of such a key blob are prohibitive.

Or did you mean something completely different that we simply
overlooked? I'd be very eager to hear about it then!

Greetings,

Stefan Winter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFIDYE2+jm90f8eFWYRAv7hAJ9ZeB6ovHI1GSJ8JK5HPqvhf1tlUwCfVw38
cNLGXdHVgHbWKkn8sigbl0w=
=Dz3q
-----END PGP SIGNATURE-----

_______________________________________________
Proxies mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/proxies